Here's something I learned on Macintouch this morning. You can tell Mavericks (and presumably older versions) to require an administrator password for many of the preference panes in System Preferences.